A(n) ______________________________ is a quantitative review of risks, to determine how an organization will continue to function, in the event a risk is realized.

A.
Monitored risk process
B.
Disaster-recovery plan
C.
Business impact analysis
D.
Full interruption test
E.
Information security audit